Outt
Sett
Behavioral task
behavioral1
Sample
81fe7d3b7104b9fe2761629f92314144_JaffaCakes118.dll
Resource
win7-20240704-en
Target
81fe7d3b7104b9fe2761629f92314144_JaffaCakes118
Size
61KB
MD5
81fe7d3b7104b9fe2761629f92314144
SHA1
da7ff693a45c75aa76757cd0ed020e1fdd132699
SHA256
7566b3005e246fd8e391ed560fb600a6f8f5ae20f150a828e94496748469f693
SHA512
9f38354d80cc6d25e609deef03e8a48b191c7d2bcfa30bc7d455a6867188acb3dc6313beb7045dd4acbc4dfd181ae8734f2b4abbc2cd855587f4754cead43c55
SSDEEP
768:GbvLDaaMact8T1+YGgR+vkJIzEA13vgn84gbbV3l80ZyVOv5hBkVE5OcHm1Pa+ql:ev58k2zVgnHg/dYOnB2+ObNa+e6NSTR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
81fe7d3b7104b9fe2761629f92314144_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ